• None Yet. What does incident management look like on day 1: Brilliant. Small, simple process that makes for a good starting point for a company.
    • Declare
      • Call the incident
      • Call it when you need more eyes (not severity)
      • Waiting means you might start working the problem later than you could have
    • Stop regular work
      • People working an incident need to focus on recovery
    • Who
      • One person at a time for however long the team agrees
    • Comms
      • One person makes the company aware of what is known, what we’re doing and when to expect another update
    • After
      • Learning
        • What happened
        • What was learned
        • What will change to avoid or help recover from this kind of incident
      • Write down action items and add to the backlog
    • Reporting
      • Spreadsheet
        • Date
        • Duration
        • What broke
        • What fixed it
    • Later
      • Severity
      • Commander
      • Blameless